[midgard-user] midHoo 2.0a "hacked together" ;-) (was: [midgard-user] Midhoo, packaging & distributing Midgard apps)

[Philipp Rotmann, Linksystem Muenchen]

     Hi there,

unfortunately I didn't get any feedback regarding my email from
07-01-2001:
> Thinking about snippetizing and packaging even such a small
> application as our Midhoo rewrite, I'm just stumbling across
> the next problem. I was planning to encapsulate the functions
> needed to access the link directory in a code snippet (like a
> library, maybe as a php class) and realize the user interface
> as a single page.

Now I've got an 'alpha' version of midHoo up and running, and
again I'm wondering how to package it best ... 

Until now, it consists of one Snippet and two pages, each with
some page elements. I'm also not yet happy with the poor
separation between code, design and content -- another topic I'd
need input from others. No input without others looking at the
code, and no one else looking at the code without some kind of
packaging ;-)

> Another question that comes to mind is the one of
> configuration. For the beginning, a Midgard app could ship
> with an INSTALL file describing the parts of the XML file to
> change before import via repligard, more complex apps could
> use autoconf -- but when we get to the point that Asgard
> supports import/export of applications via HTTP, some
> 'configure' functionality would be needed.

Well, for now I've just defined some constant values in my
Snippet -- that should do it for a while.


Back to midHoo: I'm planning to call it midHoo 2.0 after
release, so I'm now playing with midHoo 2.0alpha, since the
stuff that is currently running lacks some important features:
 - language independence (coded strictly in English, error
   messages in English, "normal" interface in German for the
   moment because I need a German interface for the customer
   site)
 - full-text search
 - inclusion of more than the "pre-defined" midHoo link fields
   in the email to the editor (my client wants the possibility
   to ask people a number of additional questions such as about
   their physical address, and those information should reach
   him by email and not be stored in the database)
 - clean browsing capabilities in the link list (display X links
   per page)

For the German-speaking crowd: 

  http://www.wochenanzeiger.de/netlinks/

contains midHoo 2.0a with more-or-less dummy content. Feel free
to submit links, they won't appear publicly unless I will have
approved them (emails go to me only, so happy spamming ;-)).


BTW, there's a possible security problem in it: In order to be
able to create a link record w/o being logged in (as anonymous
users should be able to submit links for approval), I created a
user 'guest' and a group 'guest' that owns the midHoo topic
tree (and only that). Now anyone could crack guest's password
and view all the stuff in that sitegroup -- is there any other
possibility to reach the same objective w/o exposing the system
that much?

     phr
-- 
Linksystem Muenchen GmbH                          [EMAIL PROTECTED]
Schloerstrasse 10                           http://www.link-m.de
80634 Muenchen                              Tel. 089 / 890 518-0
We make the Net work.                       Fax 089 / 890 518-77

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]